CVE-2022-3100

Advisory

Barbican 12.0.2, 13.0.1 and 14.0.1 include a fix for CVE-2022-3100: This issue allows an access policy bypass via a query string when accessing the API.
https://github.com/openstack/barbican/commit/6112c302375bf3d4c27303d12beec52ce2a82a2b

Affected package

Affected versions

Fixed versions

Vulnerability changelog

A flaw was found in the openstack-barbican component. This issue allows an access policy bypass via a query string when accessing the API. See CVE-2022-3100.


MISC:https://access.redhat.com/security/cve/CVE-2022-3100: https://access.redhat.com/security/cve/CVE-2022-3100

Resources

• https://access.redhat.com/security/cve/CVE-2022-3100
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3100